- Provide support and expertise in various security operations functions, including monitoring security tools and reports, anomaly detection, and interpretation.
- Assist in managing security incidents, including escalation, remediation, and follow-up for identified security issues.
- Manages vulnerability scans and supports penetration testing against enterprise IT environments.
- Contribute to the management design of the vulnerability management program, including remediation, validation, escalation, and reporting.
- Collaborate with internal engineering and operations teams to address security escalations and liaise with vendors as needed.
- Assist in the design and implementation of security solutions, technical controls, and interactions with security vendors.
- Perform quality validation and review of platform, delivery, architecture designs, and security.
- Implement, maintain, and configure security tools and assist with break-fix activities.
- Contribute to risk management, problem resolution, vulnerability and incident resolution.
- Support secured access administration processes and procedures.
- Participate in on-call rotations to provide logical and physical security support.
- Assist during compliance audits by providing evidence, meeting with auditors, updating policies and procedures, and assisting with remediation.
- Offer technical oversight of security tools, alert and response, notification communications, and asset management.
- Perform other duties as required and assigned.
- 3+ years of experience or equivalent in IT security and compliance, preferred service provider experience.
- Foundational knowledge of security and compliance engineering and operations practices
- Basic proficiency in security configurations and standards for network, Windows, and Linux
- Understanding of IT networking and virtualization technologies.
- Understanding of Windows and Linux server and workstation security
- Strong written and verbal communication skills
- Ability to manage multiple projects concurrently
- Willingness to Support 24/7/365 operations
- Familiarity with security tools/products such as Nessus, Logrhythm, Tripwire, Trend, Fortigates, or similar security tools/products
- Experience with Fortinet Products
- BA/BS education
- GDSA / CISSP / CISA or working toward these or equivalent certifications
- Requires extended computer and keyboard usage
- Require extended periods of sitting or standing
- Requires limited usage of phone
- Travel less than 10%
- Medical, Telehealth, Dental and Vision
- 401(k)
- Health Savings Accounts (HSA) and Flexible Spending Accounts (FSA)
- Life and AD&D
- Short Term and Long-Term disability
- Flex Time Off (PTO)
- Leave of Absence
- Employee Assistance Program
- Wellness Program
- Rewards and Recognition Program
Information Security Engineer - Charlotte Corp, NC, United States - Flexential
Description
Job Description:The Information Security Engineer is an mid-level engineering position in the field of information security providing engineering support to the platforms and tools that protect the business. This role requires foundational understanding of technology stacks, security tooling, threat and vulnerability management, and familiarity with security, and compliance standards. The role requires a highly motivated, eager attitude. Ideal candidates will be capable of multitasking, planning, and strong communication and customer service skills.Key Responsibilities and Essential Job Functions
Base Pay Range: Annualized salary range offered for this position is estimated to be $112,100 - $124,000. However, the actual pay range depends on each candidate's experience, location, and qualifications.
Variable Pay: Discretionary annual bonus, based on personal and company performance.
EEO Statement: Flexential is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
#LI-PS1